Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
File:                     ee65ad11-73c6-378b-9f9e-179df4feaa37.roa (raw, json)
Hash identifier:          0pYukvqj/xvTi1YoUKY5QmQ+c0NOyOKCz4CziHdK9y8=
Subject key identifier:   D6:4A:B8:83:AE:25:90:42:08:C7:BE:7F:89:A6:1A:A5:BC:6D:B4:48
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F4328584206B2C564F6CF8008D7932380
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
Signing time:             Sun 28 May 2023 01:00:16 +0000
ROA not before:           Sun 28 May 2023 01:00:16 +0000
ROA not after:            Sat 26 Aug 2023 01:00:16 +0000
asID:                     399864
IP address blocks:        45.41.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 May 2023 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:06:b2:c5:64:f6:cf:80:08:d7:93:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: May 28 01:00:16 2023 GMT
            Not After : Aug 26 01:00:16 2023 GMT
        Subject: CN=f5f6393d-0cbd-44b3-9fb4-1e307f01d279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6a:20:ea:43:84:81:bb:c8:87:3e:a1:f3:35:
                    7b:57:d1:2b:61:5a:08:8f:ff:ec:77:05:98:e1:56:
                    50:d4:c4:c2:8e:3f:ec:1c:9b:23:db:dd:66:c6:2e:
                    3c:2b:83:e1:dd:c8:6d:34:28:d9:03:c3:ea:83:84:
                    fc:aa:d9:ff:a9:6d:3b:c4:62:78:4e:4c:eb:16:9f:
                    41:04:87:dc:a8:91:c0:0d:05:3d:a7:25:73:0e:11:
                    bd:ee:44:f9:48:07:01:86:23:63:b7:23:55:aa:e7:
                    5c:b9:45:11:b2:2f:2b:b6:94:a6:13:a8:4a:14:d0:
                    2e:18:46:7f:ce:f3:91:5a:e0:aa:4d:33:02:5d:1a:
                    24:68:98:eb:a0:d9:40:b4:98:dd:6d:46:5f:c3:a2:
                    cf:60:92:d4:7b:53:8e:e0:c1:ad:89:57:0e:82:26:
                    1d:76:da:13:d7:09:ba:40:d2:6f:5a:97:74:44:f2:
                    44:c5:59:24:d6:26:df:15:03:05:0c:e5:ae:99:a8:
                    02:d6:85:ad:f7:99:25:be:c1:a9:7e:d5:02:90:b7:
                    fe:5c:5e:bb:01:da:a9:72:98:45:e0:94:fe:72:19:
                    6f:93:95:e9:5d:29:eb:ab:d7:90:73:8f:67:41:be:
                    5b:05:f2:3d:a0:57:12:37:ce:e0:54:ed:e9:6b:12:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:4A:B8:83:AE:25:90:42:08:C7:BE:7F:89:A6:1A:A5:BC:6D:B4:48
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier: 
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:40:60:a6:88:55:a2:be:21:96:99:9c:1a:f5:eb:ef:30:9a:
         07:48:1e:57:42:55:7e:c0:09:41:76:f7:38:3b:c1:70:d2:a7:
         35:da:51:80:63:26:d2:e1:57:40:7b:ad:f3:2a:3a:4b:84:28:
         8a:d4:94:54:99:fb:66:d1:aa:87:e2:a0:3e:00:23:56:ce:04:
         25:d3:10:31:7a:bc:17:8b:b4:ff:46:fb:71:6b:7a:b1:50:ab:
         01:b3:ca:fc:4a:e3:48:64:6a:31:e8:a1:af:a7:1d:6f:e9:3a:
         53:da:9e:50:4f:5e:bc:5d:38:34:3e:fd:fb:0f:45:fa:2a:46:
         62:bf:e6:02:84:24:75:b0:6e:49:0f:a3:d1:78:0e:98:1e:21:
         eb:48:ad:89:6a:a9:ea:63:b5:70:58:21:8f:2f:14:da:f0:b5:
         db:8f:a9:db:1f:e3:f3:d1:95:38:67:73:62:8a:0d:71:d4:17:
         c5:d1:b7:64:dd:8f:28:34:43:89:f2:bf:07:7d:8c:84:03:79:
         bb:ee:2d:ad:01:68:3b:14:6d:06:31:88:87:e9:02:d2:ad:a5:
         bb:8c:98:5e:97:e7:ef:d4:7f:30:4d:bd:43:71:47:a7:39:d9:
         cb:ce:e8:7d:3a:b0:44:48:69:03:41:a6:47:e0:15:9b:43:40:
         b5:bc:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 28 01:58:05 2023 by rpki-client on console-ams.rpki-client.org